Privacy

Analytics

The public homepage can send page-view and desktop-app launch events to this site's own Postgres database. Visitor counting uses a daily salted hash derived from network and browser signals. Raw IP addresses and raw user-agent strings are not stored as analytics fields. Referrers are reduced to an origin such as https://www.google.combefore storage. Country may be inferred from the hosting platform's edge country header when present. Raw analytics events are retained for 90 days. Before those raw events are deleted, the site stores daily visit and app-launch totals (without visitor hashes) for up to about two years so long-range traffic trends remain available in admin. Older daily totals are then deleted automatically.

Vercel Speed Insights may also collect aggregated performance metrics for the site.

Contact messages

If you use the contact form, your name, email address, subject, and message are stored in Postgres so they can be reviewed in the private admin inbox. The same content may be emailed through Resend to the site operator so replies can be sent. Contact messages are retained for 12 months and then deleted automatically, and can also be deleted earlier from admin. Copies already delivered to email inboxes or Resend follow those providers' own retention rules.

Errors and diagnostics

Sentry receives application errors and may record an error-triggered session replay to diagnose failures. Default PII collection is disabled, and replay input masking is enabled. Admin routes and the contact form are treated as sensitive surfaces for replay blocking where selectors apply.

What is not collected here

There is no public account sign-up. Advertising cookies are not used for this portfolio analytics path. Offline copies of public portfolio content may remain on a visitor's device through the progressive web app cache until that cache is cleared or expires.

Requests

To ask about a contact submission or analytics retention for this site, email sahil@sahilbasumatary.dev.